Control Specific ICMP or ICMPv6 Types and Codes

Create a custom application for ICMP or ICMPv6 message types and codes.
Select
Object
Applications
and
Add
a custom application.
On the
Configuration
tab, enter a
Name
for the custom application and a
Description
. For example, enter the name ping6.
For
Category
, select
networking
.
For
Subcategory
, select
ip-protocol
.
For
Technology
, select
network-protocol
.
Click
OK
.
On the
Advanced
tab, select
ICMP Type
or
ICMPv6 Type
.
For
Type
, enter the number (range is 0-255) that designates the ICMP or ICMPv6 message type you want to allow or deny. For example, Echo Request message (ping) is 128.
If the Type includes codes, enter the
Code
number (range is 0-255) that applies to the
Type
value you want to allow or deny. Some
Type
values have Code 0 only.
Click
OK
.
Create a Security policy rule that allows or denies the custom application you created.
Create a Security Policy Rule. On the
Application
tab, specify the name of the custom application you just created.
Commit your changes.
Click
Commit
.